Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37312e302f32342d3234203d3e20313530323130.roa
File:                     3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (raw, json)
Hash identifier:          cm8rn1Dad9pT2qj/y63FQS/OK4fe/6OxXSYcTVcvLLg=
Subject key identifier:   E3:B4:46:2F:E7:F0:08:1A:AF:5F:C6:08:11:DC:4B:1B:82:4C:2C:C9
Certificate issuer:       /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB
Certificate serial:       67E496E4881BE34096E33105248EBA1F7A4938D1
Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37312e302f32342d3234203d3e20313530323130.roa
Signing time:             Tue 13 Feb 2024 12:00:01 +0000
ROA not before:           Tue 13 Feb 2024 11:55:01 +0000
ROA not after:            Tue 11 Feb 2025 12:00:01 +0000
asID:                     150210
IP address blocks:        103.10.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl
                          rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 10:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e4:96:e4:88:1b:e3:40:96:e3:31:05:24:8e:ba:1f:7a:49:38:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB
        Validity
            Not Before: Feb 13 11:55:01 2024 GMT
            Not After : Feb 11 12:00:01 2025 GMT
        Subject: CN=E3B4462FE7F0081AAF5FC60811DC4B1B824C2CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:ee:16:2a:d9:aa:e5:5b:a3:ab:e8:bd:2d:
                    a1:6e:cd:48:54:22:c7:d4:5f:22:6f:3c:7c:72:22:
                    20:6e:a8:b6:8a:0a:e6:0a:6a:d6:ab:e5:b2:7d:cd:
                    7d:6a:d8:37:bf:77:1a:ea:e2:56:17:58:06:25:85:
                    79:92:8d:d7:55:fe:2d:17:cf:7f:e6:7d:df:fb:e2:
                    9e:03:e2:7f:53:d8:a6:bb:e6:8f:89:f2:8a:52:7e:
                    6a:2c:bc:76:1a:1a:ad:96:16:2c:ba:59:50:7c:4b:
                    a2:dc:ae:99:41:42:3e:5a:d2:a0:f0:40:87:36:dc:
                    7c:67:d8:05:9e:ff:d9:f0:b1:6b:b9:2f:65:3c:a7:
                    73:e2:7f:f8:b0:81:31:ba:98:c5:7a:02:67:f4:fe:
                    2f:b7:f1:aa:4a:3b:ae:40:0e:1c:1d:4a:6b:2b:16:
                    87:95:5b:03:c4:8f:35:8e:7c:56:6a:a4:cd:fb:ce:
                    56:6d:f0:51:12:b9:6a:b0:e1:7b:00:33:c2:12:a6:
                    9c:e1:d4:f7:8e:78:3c:6f:03:51:b6:18:e2:cf:7d:
                    ea:10:1f:c6:ae:57:09:ab:f2:96:b9:97:ee:5a:36:
                    a7:68:42:21:df:59:b0:9f:4a:8e:da:4c:2a:b1:2c:
                    e8:24:a2:1f:54:d2:6e:1a:2b:47:09:f8:3e:30:32:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B4:46:2F:E7:F0:08:1A:AF:5F:C6:08:11:DC:4B:1B:82:4C:2C:C9
            X509v3 Authority Key Identifier:
                keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37312e302f32342d3234203d3e20313530323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:cd:a4:0a:c2:e1:bb:30:8f:0f:9b:bf:7d:ac:34:cf:e1:
         26:85:86:18:f5:21:55:c8:9d:67:b7:72:26:94:2c:50:a6:34:
         31:15:32:93:6a:25:d8:1b:83:6e:4f:2e:5f:0c:82:53:02:25:
         d5:03:1d:c2:52:13:33:e7:42:86:df:3f:ff:73:a3:89:6f:ae:
         0e:ad:45:b2:15:0d:ff:04:5b:01:46:b2:69:98:4d:e7:ee:d8:
         49:a5:dd:21:26:42:ac:de:5e:13:ce:0b:ec:00:b1:bd:ed:fe:
         47:d2:60:cb:95:61:81:aa:e3:13:9d:7c:6d:ac:05:e3:5f:07:
         cc:3e:85:af:28:12:41:4b:c5:20:f7:32:83:ed:4e:18:8a:ea:
         6c:53:37:e1:98:4a:0d:46:71:d0:64:dd:3b:1b:99:09:a2:08:
         b0:de:c0:e4:53:51:26:d7:a2:5b:84:26:30:ed:26:ac:a5:68:
         20:0c:0a:22:8c:60:99:54:38:77:2e:c6:81:f2:47:8a:6d:e0:
         f8:0e:ac:d9:1b:13:06:da:e2:2d:cb:c6:57:62:d1:f6:52:2e:
         04:29:ab:b1:a7:2e:dc:f1:25:1f:37:4e:a0:4c:6b:bc:8e:25:
         ab:3d:c5:d4:f9:fb:76:d4:55:31:8d:27:5a:cb:66:aa:ae:ce:
         4b:42:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org